Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
File:                     rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json)
Hash identifier:          4NSJhU6b+vp8PWLLbf1+evRgWIsK0Kb7L1qZ1GCndcE=
Subject key identifier:   CC:33:8D:53:52:A2:6D:86:A5:48:8C:82:82:39:86:B9:2D:F0:7A:F9
Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3
Certificate issuer:       /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
Certificate serial:       0722
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
Manifest number:          071D
Signing time:             Sat 28 Jun 2025 21:28:15 +0000
Manifest this update:     Sat 28 Jun 2025 21:28:15 +0000
Manifest next update:     Sat 05 Jul 2025 21:28:15 +0000
Files and hashes:         1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: POwcciYc7fTu+E/lDtFGk0lEoFhggjxydVc1ZWccjQA=)
                          2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: WhAEh4S3tK527emBBM2jGEQwQFEHNqJyzLHLvoZ2c44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl
                          rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
        Validity
            Not Before: Jun 28 21:28:15 2025 GMT
            Not After : Jul  5 21:28:15 2025 GMT
        Subject: CN=68605e6f-02ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:a4:14:24:c6:d3:d8:85:8f:29:35:16:00:
                    6d:d4:14:c3:21:ea:75:04:0e:b3:c8:e6:ce:37:7b:
                    53:79:81:bf:45:71:e8:35:ca:3f:2a:98:e8:e0:d5:
                    99:c5:8d:65:16:c3:e1:ae:4d:c7:96:8c:96:2a:20:
                    ad:b0:46:84:19:c2:95:b2:13:ac:e7:f5:4e:7f:ae:
                    77:ab:05:29:a8:9f:10:b0:ca:c2:78:06:08:ae:92:
                    3e:92:f1:80:25:36:e3:87:c2:56:b8:e9:3a:aa:f8:
                    65:92:40:42:62:9f:b0:79:cd:9c:6e:5e:2f:90:07:
                    f6:e7:79:ef:a1:26:5d:c6:38:79:9d:8b:d8:ba:55:
                    6e:f4:41:e1:db:4c:4c:0b:42:69:1d:78:d9:5e:3f:
                    bb:24:e7:42:92:d9:cb:6b:35:ed:3f:49:9f:11:d9:
                    ee:fd:12:98:47:47:51:07:2c:4d:0d:7d:6d:9b:64:
                    8f:20:69:84:d5:1d:0b:fe:7e:88:dc:93:5b:b2:5a:
                    08:15:ee:1f:e1:2c:f8:19:36:7c:8f:53:b1:78:b8:
                    de:92:00:1e:00:2c:f9:86:86:48:02:90:9c:27:1b:
                    7e:a2:0a:40:dc:a2:eb:93:11:88:07:19:f6:23:98:
                    c9:68:1c:c0:38:95:40:8e:f2:a8:73:2a:7b:c8:c5:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:33:8D:53:52:A2:6D:86:A5:48:8C:82:82:39:86:B9:2D:F0:7A:F9
            X509v3 Authority Key Identifier:
                keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:83:af:c3:d8:f6:ac:9c:7c:d9:f5:10:2a:dd:23:d0:d6:
         d6:72:c9:84:89:e3:b6:4b:00:bd:36:1f:69:04:94:e3:34:35:
         c8:23:59:9c:26:86:7b:06:df:12:60:93:e2:cf:2a:e5:f8:db:
         e6:44:3b:f7:fc:0b:0d:1e:bd:63:88:41:17:37:3a:a0:e7:03:
         a1:44:35:5e:b8:f6:b6:ff:64:45:1f:fb:dd:8b:8c:6e:6e:7b:
         a3:a5:7a:4f:1b:ab:8b:82:88:b8:14:4d:34:45:02:cd:55:76:
         e1:7b:0d:34:36:f0:f7:4c:d1:22:38:aa:3e:a2:97:59:d7:64:
         b1:92:b1:30:5a:4a:0d:f2:40:1d:2d:59:d4:15:22:3d:4b:8e:
         69:6b:8a:d7:53:d0:5b:95:8d:a6:25:64:ab:4f:13:19:e2:b2:
         45:de:9c:12:17:7b:37:a7:2f:e1:40:bf:b5:1e:5b:e8:66:ca:
         ba:70:a3:4a:0b:aa:70:f7:ab:99:7f:ac:71:f2:3d:33:86:57:
         2b:24:2d:b3:79:0e:db:d8:56:05:c0:e7:ec:fd:b9:5f:b1:1b:
         f2:d1:c5:be:dc:34:86:ed:f8:28:fb:ea:a6:a3:78:22:ff:79:
         51:57:8b:83:76:bb:03:09:fd:95:57:16:60:77:46:14:a2:b2:
         e8:a2:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:22:14 2025 by rpki-client